Senior Systems Administrator

The System Administrator III is a senior technical contributor with deep expertise in Microsoft 365 and Azure cloud infrastructure. This role assists with the design, optimization, and security of Ampirical's cloud and hybrid environments, serving as the internal subject matter expert for the Microsoft ecosystem. The Sr. Systems Admin operates autonomously, leads cross-functional cloud initiatives, drives automation, and mentors junior administrators across the IT team., * SME for the Microsoft 365 tenant, including Exchange Online, SharePoint Online, Teams, OneDrive, and Purview

• Design and enforce M365 governance policies covering data retention, DLP, sensitivity labels, and information barriers
• Manage and optimize Microsoft 365 licensing, including E3/E5 assignment, license reconciliation, and cost governance
• Oversee Microsoft Intune MDM/MAM policies for corporate and BYOD device management
• Manage Power Platform governance (Power Apps, Power Automate) in alignment with IT policy

Entra ID & Identity Management:

• Architect and maintain Entra ID (Azure AD) including hybrid identity with on-premises Active Directory sync via Entra Connect
• Design and manage Conditional Access policies, MFA enforcement, and phishing-resistant authentication (FIDO2/passkeys)
• Administer Entra ID Privileged Identity Management (PIM) for just-in-time privileged access
• Manage enterprise application registrations, OAuth consent policies, and service principal governance
• Lead user lifecycle automation including provisioning, de-provisioning, and dynamic group management
• Oversee B2B guest access governance and external collaboration controls

Azure Cloud Infrastructure:

• Design, deploy, and maintain Azure infrastructure including virtual machines, virtual networks, storage accounts, and resource groups
• Manage Azure AD Connect, DNS, and hybrid networking between on-premises and Azure environments
• Implement and maintain Azure-based backup and disaster recovery solutions (Azure Site Recovery, Azure Backup)
• Monitor Azure resource health, cost management, and capacity planning using Azure Monitor and Cost Management tools
• Administer Azure Virtual Desktop (AVD) or equivalent remote access infrastructure where applicable
• Ensure Azure environment adherence to security baselines, policy assignments, and compliance frameworks

Security & Compliance:

• Lead implementation and ongoing management of Microsoft security tooling across the M365 and Azure stack
• Conduct access reviews, permission audits, and Entra ID sign-in log analysis for anomalous activity
• Collaborate with the IT Security team on vulnerability remediation, endpoint compliance, and security incident response
• Support internal and external audits with documentation of cloud controls and configurations

Hybrid Infrastructure & Server Management

• Administer and maintain on-premises Windows Server environments (Active Directory, DNS, DHCP, Group Policy, Hyper-V)
• Assist with OS patching, server health monitoring, and change management for hybrid infrastructure
• Design and automate system maintenance tasks using PowerShell and other scripting tools
• Assist with disaster recovery planning, backup validation, and RTO/RPO definition for server and cloud workloads

Automation & Tooling:

• Automate repetitive IT operations including license reporting, user provisioning, and compliance checks
• Evaluate and implement automation opportunities across cloud and hybrid environments

Documentation, Governance & Mentorship

• Maintain up-to-date documentation for all cloud configurations, policies, and runbooks
• Lead compliance documentation efforts supporting ISO, NIST, and client-driven audit requirements
• Mentor Systems Admin I and II staff on cloud administration, scripting, and security best practices
• Contribute to IT governance initiatives including software procurement, policy development, and standards enforcement

Education: Bachelor's degree in IT, Computer Science, or related field (or equivalent combination of education and experience) Experience: 7+ years; 3+ years in cloud and Microsoft 365 administration Skills: AZ-104 or MS-102, Security+, Network+ preferred

Pulled from the full job description

• 401(k) 4% Match
• Tuition reimbursement
• Pet insurance
• Health insurance
• 401(k) matching
• Paid time off
• Vision insurance, Salary Range: $86,000- Commensurate (dependent on experience, education, and qualifications) Profit-Sharing Bonus: Semi-annual, performance-based (10% to 20% of salary) Day-One Benefits: Medical, Dental, Vision 401(k) with 4% match and immediate vesting ️ PTO: Starting at 80 hours of vacation & 40 hours of sick time per year + 10 paid holidays ️ Flexible Work Schedule: Every other Friday off Career Development: Advancement opportunities, tuition reimbursement Perks: Gym membership stipend, wellness program, fertility benefits, pet insurance, and more

At Ampirical, we're shaping the future of the power grid with precision, innovation, and purpose. Just as the ampere is the foundation of electric current, Ampirical is a core force driving the energy sector forward. We focus on quality, forward-thinking solutions, and empowering our team to grow and thrive. We don't just build projects-we build careers. If you're looking for a place where your contributions matter and your professional development is supported every step of the way, we'd love to meet you. Watch this video to get a glimpse into our culture.